Re: [exim] clamd av_scanner does not use configured port

Replies on the list please, so everyone gets helped (and it gets
archived for the future)...

On Fri, 2009-05-29 at 08:50 -0500, Boyd Stephen Smith Jr. wrote:
> That is unfortunate. Is there any way to restrict ClamAV to only one port for
> that? Or possibly an iptables conntrack helper to load?

Now that would be a question for the ClamAV support structure, rather
than here. But I'll give you some clues:

Clue 1: man clamd.conf
Clue 2: StreamMinPort
Clue 3: StreamMaxPort

;-)

> However, the exim server is named rei and can only connect to ichi on port 22
> and port 3310.

So it would appear that you need to open up this restriction a little in
order that ClamAV can work in the way it is designed. You probably need
an ACCEPT rule on a specified port range (see clues above) to permit
ichi to connect to rei on those ports.

Graeme